bfddf0652d723f17fff076843317d1379f5b88a804a2e699784de68050947652

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2025-Oct-11 07:02:49
Detected languages English - United States
Debug artifacts C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb
FileVersion 6000.0.60.6414259
LegalCopyright (c) 2005-2025 Unity Technologies. All rights reserved.
ProductVersion 6000.0.60f1 (61dfb374e36f)

Plugin Output

Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious The PE is possibly a dropper. Resources amount for 83.9824% of the executable.
Safe VirusTotal score: 0/70 (Scanned on 2026-09-05 23:04:59) All the AVs think this file is safe.

Hashes

MD5 856e67b737f08f80c16bd7d5eb69caa0 🔍
SHA1 39d9823d95b09b023850d86d78b9c00f0df1db66 🔍
SHA256 bfddf0652d723f17fff076843317d1379f5b88a804a2e699784de68050947652 🔍
SHA3 7e34a37dc19c2a69fad5610d847eb0bdcd1a2ca320357eeb436e1d5ce4579bd7 🔍
SSDeep 12288:I2NCDdJr3d4aXRpeMDqmM1pSv6qjw54wVoTi+d:8jNEyi7SXjwJond 🔍
Imports Hash a136217cdd3247ff6a8766561064ca0b 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2025-Oct-11 07:02:49
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xde00
SizeOfInitializedData 0x97200
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000001264 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xa9000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 2775a5a7c1fa856e6a29a4f5a5229c31 🔍
SHA1 3e9ae8fdb588fe4aae22d549f8569008c887c898 🔍
SHA256 195697288171c6371920514965e3625060b55abd960ee1903baa797ef5e0bbfb 🔍
SHA3 fb39403bbfb970d14fc395dd6c3593ca3d0aec333b14d9249010a0924d269e75 🔍
VirtualSize 0xdc70
VirtualAddress 0x1000
SizeOfRawData 0xde00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.46162

.rdata

MD5 086e57a699c2b0cb788b8940a7b1cd1a 🔍
SHA1 be9e7b6d72ec5441f9ea75b1d54777e922b3bc7c 🔍
SHA256 1ac30184a048a1953702ad02c2c629e8a9b2b6251045674d998fa4e8e920a7d4 🔍
SHA3 68c05b6180a718e02e53cf5a94ec2adc18476e017764f4bf6e3f5b61f9653b8c 🔍
VirtualSize 0x977c
VirtualAddress 0xf000
SizeOfRawData 0x9800
PointerToRawData 0xe200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.70155

.data

MD5 d284f7b260ed119794375a6998c5083c 🔍
SHA1 0944c690e2b7841e681f55d2a731910f8019f2ef 🔍
SHA256 79ebad17e73900bd4dd43a932cc832e1d907346973e16ac0af549524fa4b88b3 🔍
SHA3 0c023444d7239a9582798618879cf6e165fcae6d6eec1051c77592814b4894ad 🔍
VirtualSize 0x1d78
VirtualAddress 0x19000
SizeOfRawData 0xc00
PointerToRawData 0x17a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.89847

.pdata

MD5 d67581e7561b613930fcc4c3ee52cdc5 🔍
SHA1 a43e835342a8235efb9f656bba5c170d21641a61 🔍
SHA256 4eaf2a70ebe02f5f76d3b133d8a74d7c7eee9267519fd6a6951de4bcb2ad617b 🔍
SHA3 0ccfeafaf338d1bcb9c719ffca72875595bea8d6aea16bd26baa2a4685e84170 🔍
VirtualSize 0xf24
VirtualAddress 0x1b000
SizeOfRawData 0x1000
PointerToRawData 0x18600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.67172

_RDATA

MD5 dd297010ea596c9b749ddc72fe421330 🔍
SHA1 3213e7a4b99366f1367f1b5dc97aa4853369a784 🔍
SHA256 420a70f17663b392f63eb448853ebc800a3f7cf9c6e0b78b7e421d671dd927fd 🔍
SHA3 f4660bd566f5561530bb0e40a752616d5a8180b7180fcf869790d48f9fb6e9bf 🔍
VirtualSize 0x1f4
VirtualAddress 0x1c000
SizeOfRawData 0x200
PointerToRawData 0x19600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.71477

.rsrc

MD5 2ada89eb1feab7db9447725aa266be49 🔍
SHA1 4bf32a9eb4e35afa035a0478133435a2c3f644e7 🔍
SHA256 1641f52299c31cb6685b9bb643b657d511412def11db899121515f971e6ec27f 🔍
SHA3 405d0bfcac8d37c1ce34ab007805132b372f41b13013d0da7e13f8da44739c30 🔍
VirtualSize 0x8a018
VirtualAddress 0x1d000
SizeOfRawData 0x8a200
PointerToRawData 0x19800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.1669

.reloc

MD5 79918e2814a23b917e4a5494067a35d5 🔍
SHA1 eab8dd05e160cbff9fa1c348b6c35e7f161cf459 🔍
SHA256 cccb376562c958fee6ec06051a48d2c5c0232065e1000ce2d4b0775e46737238 🔍
SHA3 0fcd95a99b9b4e77c2e23089f450965a4028a243ef56d1928fdcfcebcc4b7120 🔍
VirtualSize 0x658
VirtualAddress 0xa8000
SizeOfRawData 0x800
PointerToRawData 0xa3a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.87002

Imports

UnityPlayer.dll UnityMain2
KERNEL32.dll HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

AmdPowerXpressRequestHighPerformance

Ordinal 1
Address 0x19004

D3D12SDKPath

Ordinal 2
Address 0x19008

D3D12SDKVersion

Ordinal 3
Address 0xf320

NvOptimusEnablement

Ordinal 4
Address 0x19000

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.22639
MD5 505661c6c93b3267b8841e2cd1089e2e 🔍
SHA1 3cd6a462eb5d66b2f4773e84c67d22fa0f03d78d 🔍
SHA256 d7432a6d68a63b7a890e84ba5c27a144d93105efd7e1988af1ed26524160a455 🔍
SHA3 aacf1c2b512867a7bc9a90c369749c7d1dcc6f61e6e09b6bb55aa617164de9d7 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.35398
MD5 a817782c6425e50347b5fd10a5e3dc33 🔍
SHA1 9721fb5f964a2cdc132f0ed8bd98fac5faab99a7 🔍
SHA256 e0b87c99c81e66d3b3ea2c9c4262f06f77f4d75a16e8bc81c8eafbbe55440d67 🔍
SHA3 49506678becbccbd9fe16f057053bda47236199b0e8e501bfa6906d6ead2110b 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.41744
MD5 8510c86cf59bb6875778cd1d4e9bea64 🔍
SHA1 a03550d9a9b12dac3d23706c196b16fa8c905b93 🔍
SHA256 5b325993deb1d99d850310eff51792b30d75a3cf84226365d7463d026f4c117c 🔍
SHA3 c0c8e210d71ed1ca84fb3eaa253d13ec2f87c34e8d386604ed96050792eb6453 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.37104
MD5 243cb0758acbaef96ffee8bafbdfcf20 🔍
SHA1 8a930d0bfa9922483d3cf1d9b328f26a387ae137 🔍
SHA256 4e0b4503c6a758a574b997a1e5836c30d3a4aa79ec90a5bf0dfc19250a918522 🔍
SHA3 f8ac75911af7293972c0d37a9249c28e7941918ac74c612f4a771615ab3e19f3 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.39545
MD5 2009ffaaf280a9c12fd931399932f34b 🔍
SHA1 d660759bb2b48c52aa0c2f13c97ecdf614cfc344 🔍
SHA256 dfd5648bf343bc30cd61ac9e67187dbb804d71531e4236e4e9d0ed20b542da7d 🔍
SHA3 70b75be6910ae91186f662cd4b4a0f726d82064135e7201116c35e2047d95191 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.36396
MD5 c94bee2ffee0be159911a6f17cc1766a 🔍
SHA1 c8ab0d3da5e69f04719e4b0a082b9e50394aaf0f 🔍
SHA256 d9d0ca9698914f49168efcfb35e668360f8f0fcc686f557e5bfbc1071909e6b1 🔍
SHA3 215f9cc0a98a545f987a4adbf7f9553333b0ea5a088168d7010cdcf1507e7046 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.34077
MD5 ced38ca241a5d16279088a89d8b35714 🔍
SHA1 353a4b434dcb0b9277e78a911efa397e8a2384d0 🔍
SHA256 62f3862002c0a6ec0fff7a25f3e2674477e158f9540d47c455eae719f2a5ea0d 🔍
SHA3 9a05ab3608fea00a1abf4deb1f62c077d5b8e05e5faefd4d2684a56c975d137a 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.30268
MD5 89f819a52ecc2ab38ab1d1407a3994de 🔍
SHA1 b87eea10379f52aa3cb969f221a63f87e832d539 🔍
SHA256 f4021397f8899473dccda51ad5b6052665298cf7e5b8d710642a045ce55a7fbd 🔍
SHA3 ddeea236e67f5e7cfdf8d04a33dd75b5c5f17a45051a3fa77e5e8fcc26f8e4f4 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.76193
MD5 854f53ddc0276f79243de2f0b43f0115 🔍
SHA1 5d7f9408765c694f33711404729dc3b6ea8e9b3d 🔍
SHA256 14c9fd9934866865247e775b538ef244f9fff43c743162e19a481dbd9680de95 🔍
SHA3 cf4cb1805c6d25c4ae17a2be03e28818e0144d76565fb8f8c8d93921a7745f7e 🔍

103

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04448
Detected Filetype Icon file
MD5 3bf2dac037ce87794e66ff7f054e913f 🔍
SHA1 52ca961fd37ad960905a681d1db5157508ef1602 🔍
SHA256 2a87b1f32c5d0435090c72c392b75394f706e5750eff64fd85d25e1c622ee581 🔍
SHA3 8454d3273522657b5926068082b2cb88f6dbf352e7e9568008c0e33c792f349b 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x210
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.50994
MD5 d5800b79f4077a5cfb1382642309ff18 🔍
SHA1 306b4309cd6d8a0612b799efae5c57749d7b0ad6 🔍
SHA256 7fe45674885071655f524c07b79cdd73227c6a1a617e1dabd53031027fbfeafb 🔍
SHA3 977e3bab22194b907be85088b542e6e57d0c6519f1e6c00afa0d0970358e8483 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x545
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.24993
MD5 9df530c2f4fbe460da74e130d5d351a9 🔍
SHA1 f8719b6c74e0179556c1a18f214d6c1bbff8f823 🔍
SHA256 3c357bd1125971bda05bc59eaeca279da41715741e2535e9e75c94273b1c3a1f 🔍
SHA3 ce3dd46f87bd462f8730fca18daea6df444422f8d88b810aefbd7b2e62536dee 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 6000.0.60.57267
ProductVersion 6000.0.60.57267
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_UNKNOWN
Language English - United States
FileVersion (#2) 6000.0.60.6414259
LegalCopyright (c) 2005-2025 Unity Technologies. All rights reserved.
ProductVersion (#2) 6000.0.60f1 (61dfb374e36f)
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2025-Oct-11 07:02:49
Version 0.0
SizeofData 148
AddressOfRawData 0x16d58
PointerToRawData 0x15f58
Referenced File C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2025-Oct-11 07:02:49
Version 0.0
SizeofData 20
AddressOfRawData 0x16dec
PointerToRawData 0x15fec

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2025-Oct-11 07:02:49
Version 0.0
SizeofData 852
AddressOfRawData 0x16e00
PointerToRawData 0x16000

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140019040

RICH Header

XOR Key 0x7139305b
Unmarked objects 0
ASM objects (28900) 5
C++ objects (28900) 138
C objects (28900) 10
Unmarked objects (#2) 1
Imports (28900) 2
C++ objects (33218) 40
C objects (33218) 16
ASM objects (33218) 17
Imports (33523) 3
Total imports 89
C++ objects (33523) 2
Exports (33523) 1
Resource objects (33523) 1
Linker (33523) 1

Errors

Leave a comment

No comments yet.